Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_aI8SBEuI1zdrVrC3CIJRgEQWWY.roa
File: _aI8SBEuI1zdrVrC3CIJRgEQWWY.roa (raw, json)
Hash identifier: E5uBzkZpECfViDmPwbdg2FCmbggGv3AMQpQgTYt569k=
Subject key identifier: FD:A2:3C:48:11:2E:23:5C:DD:AD:5A:C2:DC:22:09:46:01:10:59:66
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 15670801
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_aI8SBEuI1zdrVrC3CIJRgEQWWY.roa
Signing time: Wed 15 Jun 2022 18:17:47 +0000
ROA not before: Wed 15 Jun 2022 18:17:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49006
IP address blocks: 85.159.117.0/24 maxlen: 24
45.10.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359073793 (0x15670801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 15 18:17:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fda23c48112e235cddad5ac2dc22094601105966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:fd:49:77:3e:15:db:78:fe:75:34:6a:62:
38:90:88:a1:3d:d8:3f:d4:26:5e:bb:36:b8:c9:4b:
9f:f4:8e:16:e5:29:22:5b:b5:4a:ee:1c:70:ef:ea:
c9:fb:06:d6:e0:bb:b9:47:49:ee:14:a5:da:64:34:
e6:7a:42:60:fe:92:48:e6:41:c1:e0:93:42:66:a9:
d0:f1:f5:16:ee:3f:52:5f:d9:16:91:04:67:1f:32:
32:9b:75:8a:7f:2e:48:6d:5d:ba:06:9f:9f:ef:45:
77:40:d2:79:99:f1:76:1b:dc:ad:ed:06:2c:15:09:
7c:d5:9f:14:52:c8:73:77:e8:af:3e:47:ef:90:0d:
dd:aa:e6:a4:31:2e:d8:ea:5d:f0:2c:1b:e2:83:7d:
5f:65:ac:dd:39:27:9a:8c:3e:d6:d9:8b:ab:22:1d:
b5:5a:c1:ea:4a:4b:95:ff:4f:f2:4d:3a:a4:e6:f4:
9e:2e:27:d1:ac:67:90:63:61:90:c5:ad:dd:5f:65:
3d:1a:05:fd:51:ed:98:56:f5:ec:4d:99:c1:33:da:
c9:50:f0:06:a4:4d:bb:44:93:9b:0c:02:2e:1c:7a:
de:8c:e8:fd:bd:56:9c:4a:9e:17:1d:4e:3b:13:a8:
c8:7a:3b:b3:d8:20:c4:bb:69:61:53:33:bb:e1:7c:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A2:3C:48:11:2E:23:5C:DD:AD:5A:C2:DC:22:09:46:01:10:59:66
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_aI8SBEuI1zdrVrC3CIJRgEQWWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.12.0/22
85.159.117.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ac:aa:70:9c:52:cd:49:62:f2:ca:58:38:e7:94:8a:fc:b9:
31:ba:12:11:16:cf:65:20:f9:4e:fc:96:35:4c:c6:dc:40:19:
c4:92:cf:d5:98:d8:ce:34:09:53:de:7a:76:57:09:46:df:d6:
47:0c:ba:34:51:ee:1a:92:9b:3a:f0:01:bf:2c:2c:09:cb:a8:
3a:37:96:33:77:01:a3:7e:bd:18:35:1b:ba:00:3e:58:92:1f:
ea:30:66:d1:5a:57:55:f5:d3:7f:9c:cc:21:c8:cd:a1:c6:47:
54:67:55:78:28:e7:f7:85:80:8e:ff:5a:5f:7a:fc:18:5f:40:
3e:7d:ff:a1:ac:10:01:9e:77:94:62:9c:77:44:95:b2:16:99:
24:c9:a2:5b:82:08:e4:82:1a:64:55:be:ea:86:4a:30:65:f3:
78:13:34:7d:8f:c8:fc:94:d2:fa:60:33:d9:81:6a:57:9c:79:
eb:2e:04:aa:a0:5d:68:cf:3f:5c:02:03:53:44:e8:84:ce:a7:
31:5a:e1:7c:cf:ba:5c:97:82:c4:23:63:b6:fc:a8:7f:10:4d:
5b:72:59:48:c1:79:1c:81:b0:c6:ae:db:56:a1:19:6d:2c:88:
0b:c7:81:a9:ee:e5:e7:cc:1c:c7:1c:98:3b:2b:52:90:e5:eb:
c6:4a:f5:8a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEFWcIATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDYx
NTE4MTc0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRhMjNjNDgxMTJl
MjM1Y2RkYWQ1YWMyZGMyMjA5NDYwMTEwNTk2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqC/Ul3PhXbeP51NGpiOJCIoT3YP9QmXrs2uMlLn/SOFuUp
Ilu1Su4ccO/qyfsG1uC7uUdJ7hSl2mQ05npCYP6SSOZBweCTQmap0PH1Fu4/Ul/Z
FpEEZx8yMpt1in8uSG1dugafn+9Fd0DSeZnxdhvcre0GLBUJfNWfFFLIc3forz5H
75AN3armpDEu2Opd8Cwb4oN9X2Ws3Tknmow+1tmLqyIdtVrB6kpLlf9P8k06pOb0
ni4n0axnkGNhkMWt3V9lPRoF/VHtmFb17E2ZwTPayVDwBqRNu0STmwwCLhx63ozo
/b1WnEqeFx1OOxOoyHo7s9ggxLtpYVMzu+F8rVECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBT9ojxIES4jXN2tWsLcIglGARBZZjAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L19hSThTQkV1STF6ZHJWckMzQ0lKUmdFUVdXWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi0KDAMEAFWfdTANBgkqhkiG9w0B
AQsFAAOCAQEAEayqcJxSzUli8spYOOeUivy5MboSERbPZSD5TvyWNUzG3EAZxJLP
1ZjYzjQJU956dlcJRt/WRwy6NFHuGpKbOvABvywsCcuoOjeWM3cBo369GDUbugA+
WJIf6jBm0VpXVfXTf5zMIcjNocZHVGdVeCjn94WAjv9aX3r8GF9APn3/oawQAZ53
lGKcd0SVshaZJMmiW4II5IIaZFW+6oZKMGXzeBM0fY/I/JTS+mAz2YFqV5x56y4E
qqBdaM8/XAIDU0TohM6nMVrhfM+6XJeCxCNjtvyofxBNW3JZSMF5HIGwxq7bVqEZ
bSyIC8eBqe7l58wcxxyYOytSkOXrxkr1ig==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org